Who this policy covers
AgentMagic is provided by AgentMagic Inc. This policy covers our public website, web platform and desktop application. Contact privacy@agentmagic.app about personal information or privacy requests.
We determine how account, support and service-operation information is handled. When an organisation uses AgentMagic to process its customers’ or team’s information, that organisation remains responsible for its instructions, permissions and privacy obligations. Contact us before using the service if you require a data processing agreement or specific contractual safeguards.
Information we handle
- Account and organisation information: name, email, organisation details, team memberships, invitations, device registrations and account settings. Passwords are stored as salted hashes. Google sign-in, when enabled, supplies basic identity information such as your name and verified email.
- Early access: contact details, company information, team size, use case and referral information. Where early access is invitation-only, profile completeness and referral counts help prioritise invitations. Joining does not guarantee access on a particular date.
- Workspace content: prompts, chat messages, uploaded files, assistant outputs, business context, memories, work records and approval decisions.
- Connected-service information: authorised data from email, CRM, social and work tools, connection details and credentials needed for the access you grant. The data accessed depends on the feature, service permissions and organisation settings.
- Operational records: usage and credit entries, action audit records, device and browser information, IP addresses, session records and technical error metadata. Support correspondence may contain information you send us.
Why we use it
We use information to create and secure accounts, deliver assistant workflows, maintain context, connect authorised services, enforce permissions and budgets, record approvals, calculate usage, investigate errors and respond to requests. We also use records to prevent abuse and meet applicable legal obligations.
Where privacy law requires a legal basis, these purposes rely on performing our agreement with you, legitimate interests in operating and securing the service, applicable legal obligations, or consent where required. You can withdraw consent without affecting processing that was lawful before withdrawal.
AI, cloud and local processing
Assistant requests and the relevant context are sent to the model provider selected for that workflow. Providers supported by the platform include Anthropic, OpenAI, Google Gemini, OpenRouter and other providers shown in the app. The provider you choose may apply its own retention and data-use terms.
Using your own API key changes who pays for model requests; it does not make those requests local. A local model on Mac runs model inference on your computer, while connected tools, cloud approvals, account services and configured synchronisation can still communicate with online services. Installed CLI providers use their own authentication and provider terms. Review your routing and connection settings before sharing sensitive information.
Workspace memory stores context to support later tasks. Cross-company learning, when enabled in organisation settings, uses structured action features and outcome counts rather than sharing raw messages, names or addresses. Recipient references and organisation references are hashed. Administrators can disable participation in Settings. This learning feature is separate from the data-use policies of your selected AI provider.
Retention and deletion
Account and workspace information is retained while it is needed to provide the service, maintain the organisation’s records, resolve disputes, secure the platform or satisfy legal obligations. Retention depends on the data’s purpose and your organisation’s configuration rather than a single period for every record.
Deleting a file or memory removes that item from the corresponding active store where the feature supports deletion. It does not automatically erase related chat, audit, usage or third-party records. Some audit and credit records are append-only. Backups can retain information until their normal replacement cycle completes.
For account closure, access, export or broader deletion, email privacy@agentmagic.app. We verify authority, assess legal and security retention needs and explain any records that must remain. Disconnecting an app prevents future authorised access through that connection; it does not recall information already sent to a provider or recipient.
Your privacy choices
Depending on applicable law, you may have rights to access, correct, delete or receive a copy of personal information; object to or restrict processing; withdraw consent; and complain to a relevant privacy regulator. Contact privacy@agentmagic.app to make a request. We may need to verify your identity and, for organisation data, your authority.
AgentMagic is intended for adults using business software. Do not use it to collect children’s personal information without an appropriate lawful basis and safeguards. If you believe a child has provided information improperly, contact us.
Cookies, security and updates
See our cookie policy for browser storage and our security page for implemented controls and their limits. We update this policy when the service or its practices change, and provide additional notice where required. The date at the top identifies this version.